Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/vQ0ZK1kQpl5SzCyveSQSZ9vqmDc.roa
File: vQ0ZK1kQpl5SzCyveSQSZ9vqmDc.roa (raw, json)
Hash identifier: qeph6TaWsxJrjSvtHO865ouZdWx6dEi/4utM437idZ0=
Subject key identifier: BD:0D:19:2B:59:10:A6:5E:52:CC:2C:AF:79:24:12:67:DB:EA:98:37
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 1CA9
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/vQ0ZK1kQpl5SzCyveSQSZ9vqmDc.roa
Signing time: Thu 02 Jan 2025 13:58:18 +0000
ROA not before: Thu 02 Jan 2025 13:58:18 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 137718
IP address blocks: 118.196.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7337 (0x1ca9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Jan 2 13:58:18 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=BD0D192B5910A65E52CC2CAF79241267DBEA9837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d3:34:ec:83:b4:1e:1a:78:8b:52:1e:3e:0d:
f7:f0:ce:97:94:9e:d1:73:39:3c:2f:e7:bc:d0:7e:
c6:53:33:77:25:85:3b:92:88:32:5b:90:2a:f0:c7:
ae:4f:6a:e3:13:51:10:85:14:ea:db:87:ca:84:63:
c4:7d:f8:ed:e9:b7:d4:b2:4f:3f:d0:a4:4e:eb:e5:
25:01:99:79:d0:b8:76:8d:87:c0:aa:b1:86:e1:f5:
a3:9b:cc:74:20:4d:ff:c1:de:d5:91:d7:00:c5:cd:
32:51:a7:d0:3b:18:b8:b1:62:68:1e:54:ca:7f:f2:
23:cd:53:34:0f:7e:c7:67:ea:2a:f4:75:80:20:76:
b8:5f:21:3e:b9:9f:91:15:6b:5c:0d:a4:c4:e5:f7:
b3:e9:54:71:7c:14:e8:d9:4f:3e:57:7f:a1:8e:4d:
b9:c3:06:f2:53:c1:e0:6d:17:a5:cb:a6:8d:31:d1:
7c:01:37:c2:ba:fd:5e:81:39:99:3e:45:45:28:f6:
49:ad:12:48:1c:5d:ee:aa:9c:9e:ab:9d:dd:14:d7:
97:36:f3:77:2e:89:e3:dc:32:c4:33:f4:a9:e2:f2:
92:fc:56:e2:84:6a:8d:8c:c6:51:53:3d:28:e0:a4:
41:2c:c8:ba:23:3e:65:ee:18:0f:83:3f:96:21:60:
de:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0D:19:2B:59:10:A6:5E:52:CC:2C:AF:79:24:12:67:DB:EA:98:37
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/vQ0ZK1kQpl5SzCyveSQSZ9vqmDc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.196.0.0/15
Signature Algorithm: sha256WithRSAEncryption
4e:e4:83:99:52:01:9f:9f:01:d2:23:b4:91:0e:ef:b4:63:50:
a6:5a:22:c0:97:88:41:7b:af:d8:75:77:50:8b:ec:9c:6d:e2:
56:5d:4f:52:9c:47:92:7d:a3:8e:ed:66:b0:2e:28:52:a8:e8:
6c:63:66:dd:11:31:ed:95:9a:01:8d:4b:34:29:64:05:d0:64:
85:41:10:e3:e3:6a:ad:bb:06:fc:18:4d:d5:51:2b:34:e5:0f:
60:e4:60:77:d1:fe:1a:24:26:22:5a:9b:0a:72:88:e7:3d:a4:
55:ce:3c:dd:33:ef:ae:b5:7b:19:6c:cb:35:02:0f:36:23:9a:
20:98:b7:4b:c8:81:67:c5:06:60:de:db:65:05:fb:f8:74:b7:
ad:b9:d1:e2:c8:63:d2:6c:22:a6:72:81:6f:5e:38:f9:cf:e6:
e0:e1:14:18:6e:4f:fc:3a:5b:01:3a:95:72:61:96:d1:49:f2:
f3:09:75:b2:a1:ea:ba:0d:11:5c:fa:35:18:08:e1:74:f6:7f:
9c:f0:8d:08:e7:27:db:3c:72:55:34:ff:4e:24:d1:d8:e9:79:
f2:aa:dc:a9:54:32:d1:bb:ad:21:c0:07:06:e3:f8:77:db:94:
47:cd:07:12:87:44:4b:1e:1b:52:76:b8:a4:01:4b:e0:fc:ee:
f7:05:d4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:22:30 2025 by rpki-client